com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +93 more potentially affected by CVE-2026-107226 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.13)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =2.0.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-107226 Source advisory: MEND:CVE-2026-107226...

CVE-2026-2964-Lab

CVE‑2026‑2964 Lab – Prototype Pollution to RCE This repository contains a complete lab environment for CVE‑2026‑2964, a prototype pollution vulnerability in the web‑audio‑recorder‑js library that can lead to remote code execution under specific conditions. The lab includes: A vulnerable server...

CVE-2026-34227

Unauthenticated MCP Interface + CORS Bypass Sliver's MCP server spins up an unauthenticated SSE interface and fires back Access-Control-Allow-Origin: on every response. The mcp-go library doesn't validate Content-Type, so Simple Requests text/plain skip the browser's preflight check entirely. No...

CVE-2026-29000-Lab

CVE-2026-29000 — pac4j-jwt Library-Level PoC Lab TL;DR This repository contains a library-level PoC for CVE-2026-29000 in pac4j-jwt. It compares vulnerable and patched behavior with two cases: Baseline : a legitimate token should be accepted Attack : a forged token should be accepted on vulnerabl...

CVE-2025-32463

CVE-2025-32463: Sudo Local Privilege Escalation Vulnerability Summary CVE-2025-32463 is a Local Privilege Escalation LPE vulnerability discovered in Sudo. An attacker can exploit this vulnerability to gain root privileges under certain conditions. Vulnerability Details Vulnerability Description: ...

f_poc_cve-2021-4034

fpoccve-2021-4034 usage cd /tmp git clone https://github.com/jcatala/fpoccve-2021-4034/ cd fpoccve-2021-4034 gcc -fPIC -c ISO646.c ld -shared -shared ISO646.o -o s.so gcc f.c -o f ./f...

CVE-2021-4034

Python3 code to exploit CVE-2021-4034 PWNKIT. This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs. The default payload starts a shell as root, generated from msfvenom: msfvenom -p linux/x64/exec -f elf-so...

CVE-2021-4034

CVE-2021-4034 Polkit's Pkexec CVE-2021-4034 Proof Of Concept and Patching Confirmed on fully patched Ubuntu 21.10 PoC Patching https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Confirmed on...

CVE-2026-3888-PoC

CVE-2026-3888-PoC compile payload gcc -shared -fPIC -o /tmp/libpayload.so payload.c...

AZL-107451 CVE-2026-95184 affecting package gnutls 3.8.13-1

Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4494 more potentially affected by CVE-2026-106444 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =2.7.0, =1.16.0, =1.16.0, =1.16.9 and more Source cves: CVE-2026-106444 Source advisory: OSV:GHSA-XW65-4HP5-5HC7...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +4494 more potentially affected by CVE-2026-106446 via handlebars (>=4.0.0, <=4.7.9)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =2.7.0, =1.16.0, =1.16.0, =1.16.9 and more Source cves: CVE-2026-106446 Source advisory: SNYK:JS-HANDLEBARS-20574183...

acpkit (>=1.5.0, <=1.9.0), akgentic-llm (>=2.1.0, <=2.2.0) +28 more potentially affected by CVE-2026-107287 via pydantic-ai (>=2.0.0b1, <=2.51.0)

pydantic-ai PYPI version =2.0.0b1, =1.5.0, =2.1.0, =0.1.9.62, =0.2.1, =1.1.0, =2.0.0b1, =5.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.17 and more Source cves: CVE-2026-107287 Source advisory: OSV:GHSA-V36G-JCW9-X7CW...

clai (>=1.77.0, <=1.107.6), compas-lca (>=1.0.0, <=1.0.2) +20 more potentially affected by CVE-2026-107287 via pydantic-ai (>=1.77.0, <=1.107.6)

pydantic-ai PYPI version =1.77.0, =1.77.0, =1.0.0, =1.1.0, =0.1.102, =26.1.0, =0.2.0, =26.1.0rc1, =0.9.1, =1.2.2 - murmur-runtime 0.1.0 - open-aura 0.1.0 - opsmith-cli 0.4.6b0 and more Source cves: CVE-2026-107287 Source advisory: OSV:GHSA-V36G-JCW9-X7CW...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107302 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107302 Source advisory: OSV:GHSA-8F34-F56X-9XPH...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107300 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107300 Source advisory: OSV:GHSA-5X5G-H9X8-2FH9...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107298 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107298 Source advisory: GHSA-24CH-F2G6-9HHH...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107298 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107298 Source advisory: OSV:GHSA-24CH-F2G6-9HHH...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107297 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107297 Source advisory: GHSA-GCX5-HXJ7-GPQQ...

@forwardemail/wildduck (>=1.40.10, <=4.0.3), @johnqh/haraka (>=8.0.1, <=8.0.17) +13 more potentially affected by CVE-2026-107297 via msgpack5 (>=6.0.1, <=6.0.2)

msgpack5 NPM version =6.0.1, =1.40.10, =8.0.1, =7.0.0, =5.8.38, =1.0.0, =1.0.0-alpha.1, =5.8.30, =0.0.1, =1.46.1, =1.32.21, =2.60.1, =1.1.0, =1.38.0, =1.1.0, =1.32.21 Source cves: CVE-2026-107297 Source advisory: SNYK:JS-MSGPACK5-20581050...